This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/1yNxCmePPnXYmANALvF6crPNDSc.roa File: 1yNxCmePPnXYmANALvF6crPNDSc.roa (raw, json) Hash identifier: NnbT8iaws5JgljNe+UvSj+hAMr2jidNTvDwKfdnsRJM= Subject key identifier: D7:23:71:0A:67:8F:3E:75:D8:98:03:40:2E:F1:7A:72:B3:CD:0D:27 Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Certificate serial: 019BE0CBC916E935BE218E7CB9C07098D0E9 Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/1yNxCmePPnXYmANALvF6crPNDSc.roa Signing time: Wed 21 Jan 2026 13:43:30 +0000 ROA not before: Wed 21 Jan 2026 13:43:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43362 IP address blocks: 130.49.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:cb:c9:16:e9:35:be:21:8e:7c:b9:c0:70:98:d0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Validity Not Before: Jan 21 13:43:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d723710a678f3e75d89803402ef17a72b3cd0d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:94:cc:6d:01:3f:e4:32:79:21:02:93:c5:57: fd:55:41:54:2a:5c:5a:07:9d:b1:17:8c:07:5b:56: 77:ab:53:f2:41:45:ad:29:b2:80:83:b5:6a:2f:0f: 9b:7c:68:d0:c3:91:48:d8:e4:5d:38:a6:25:9c:5d: 0e:0c:3e:47:9b:ce:4b:b0:67:ae:12:4f:be:a2:65: 95:c3:8d:07:ac:2b:61:20:50:be:8d:c3:88:dc:52: ae:92:93:34:1a:ce:f6:89:82:3a:93:63:44:3e:82: 5e:d9:66:df:eb:d2:f3:c0:9e:f7:e6:c1:f4:5c:0d: ba:ea:fc:b4:4b:c4:da:a6:1e:45:1b:bc:f3:b3:90: 9f:33:c9:47:dd:0b:46:d3:28:ba:c9:bb:41:b2:9c: 90:53:d1:c5:27:6f:fd:6d:45:8f:ce:03:77:96:9d: 7e:91:d1:23:a6:b2:f9:e6:08:aa:55:92:5d:43:84: f3:9e:26:59:f4:84:c3:48:9b:b7:93:de:f6:04:2f: ec:c5:ec:7a:f0:40:5f:68:2c:a2:5a:7b:bf:e5:11: 1f:0e:2f:5a:42:81:b7:d3:0d:28:d3:91:4d:fa:58: 7c:e9:80:69:86:93:12:fc:11:97:9c:c1:52:8e:8d: 71:b4:5f:fc:81:30:38:f0:3e:3c:bd:0d:38:a5:02: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:23:71:0A:67:8F:3E:75:D8:98:03:40:2E:F1:7A:72:B3:CD:0D:27 X509v3 Authority Key Identifier: keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/1yNxCmePPnXYmANALvF6crPNDSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.49.174.0/24 Signature Algorithm: sha256WithRSAEncryption 39:42:4b:fd:a8:82:d7:88:5d:bd:da:51:4d:bc:7e:e1:f8:ee: db:da:1e:8a:f0:30:2e:e4:d3:c3:0e:71:b4:82:f0:c1:c2:3c: b1:68:a3:c8:6a:ab:71:09:74:d3:07:62:7f:60:ab:96:61:76: b9:c4:ef:11:77:6c:40:5d:c0:32:3c:23:94:0b:ad:0f:02:6c: 5b:ea:db:59:00:e7:e0:50:51:c5:49:ac:33:eb:48:15:a9:9d: 8d:6e:20:33:e7:1a:38:63:d6:e1:6f:22:13:55:f3:bf:f3:a0: 58:17:e1:ef:9d:57:49:4a:c8:94:b3:04:a2:20:23:aa:9c:de: 36:2d:8e:c7:d0:e1:17:f4:8e:3b:b4:65:c2:b1:58:32:b0:76: 03:79:11:14:bd:f6:ee:03:9a:51:0b:0a:93:4f:06:59:20:b6: 33:78:05:e8:90:11:a8:d2:5f:3c:cd:53:73:b4:d2:94:7e:ab: 2b:d6:30:56:bc:85:cf:00:5a:59:db:c1:8b:fa:a5:28:45:ba: 22:76:98:e2:9b:57:d2:fd:63:9c:55:0d:b7:0d:23:4f:09:6b: e6:93:86:14:62:18:b2:dc:e8:a5:f2:2e:45:20:3d:90:84:c5: 6c:24:0d:de:10:78:54:08:3f:24:94:ab:9f:6d:36:60:83:25: 7f:54:ba:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgy8kW6TW+IY58ucBwmNDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3 NGFkODkwHhcNMjYwMTIxMTM0MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzIzNzEwYTY3OGYzZTc1ZDg5ODAzNDAyZWYxN2E3MmIzY2QwZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5TMbQE/5DJ5IQKTxVf9VUFUKlxa B52xF4wHW1Z3q1PyQUWtKbKAg7VqLw+bfGjQw5FI2ORdOKYlnF0ODD5Hm85LsGeu Ek++omWVw40HrCthIFC+jcOI3FKukpM0Gs72iYI6k2NEPoJe2Wbf69LzwJ735sH0 XA266vy0S8Taph5FG7zzs5CfM8lH3QtG0yi6ybtBspyQU9HFJ2/9bUWPzgN3lp1+ kdEjprL55giqVZJdQ4TzniZZ9ITDSJu3k972BC/sxex68EBfaCyiWnu/5REfDi9a QoG30w0o05FN+lh86YBphpMS/BGXnMFSjo1xtF/8gTA48D48vQ04pQJYQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNcjcQpnjz512JgDQC7xenKzzQ0nMB8GA1UdIwQY MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt NGMyMWE1MDVmMzQ2LzEvMXlOeENtZVBQblhZbUFOQUx2RjZjclBORFNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2 LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjGuMA0G CSqGSIb3DQEBCwUAA4IBAQA5Qkv9qILXiF292lFNvH7h+O7b2h6K8DAu5NPDDnG0 gvDBwjyxaKPIaqtxCXTTB2J/YKuWYXa5xO8Rd2xAXcAyPCOUC60PAmxb6ttZAOfg UFHFSawz60gVqZ2NbiAz5xo4Y9bhbyITVfO/86BYF+HvnVdJSsiUswSiICOqnN42 LY7H0OEX9I47tGXCsVgysHYDeREUvfbuA5pRCwqTTwZZILYzeAXokBGo0l88zVNz tNKUfqsr1jBWvIXPAFpZ28GL+qUoRboidpjim1fS/WOcVQ23DSNPCWvmk4YUYhiy 3Oil8i5FID2QhMVsJA3eEHhUCD8klKufbTZggyV/VLpG -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:55 2026 by rpki-client